fix(tmux): login-shell-proof remote invocations, honor shim -q

- remote ssh commands pass the tmux path and args as positionals to a
  fixed sh -c script: the login shell (zsh/fish) only parses quoted
  words, sh does the expansion. No exec before a || fallback — a
  successful exec would make the fallback unreachable.
- deva-bridge-tmux shim: -q suppresses info lines again (stdout to
  /dev/null, warnings/errors stay on stderr), matching the old script.

Verified live: ls, spaced-arg tmux passthrough, bridge lifecycle.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: lroolle

scripts/deva-bridge-tmux

@@ -20,10 +20,12 @@ Prefer: deva-tmux bridge start   (auto-selects ssh when provisioned)
 EOF
 }
 
+QUIET=0
+
 while [ $# -gt 0 ]; do
     case $1 in
     -h | --help) usage; exit 0 ;;
-    -q | --quiet) ;;
+    -q | --quiet) QUIET=1 ;;
     -H | --host)
         [ $# -ge 2 ] || { echo "$prog: missing value for $1" >&2; exit 1; }
         DEVA_BRIDGE_HOST="$2"; export DEVA_BRIDGE_HOST; shift ;;
@@ -38,4 +40,9 @@ while [ $# -gt 0 ]; do
     shift
 done
 
+# -q matched the old script's behavior: info lines suppressed, warnings
+# and errors still on stderr.
+if [ "$QUIET" -eq 1 ]; then
+    exec deva-tmux bridge start --transport socat --foreground >/dev/null
+fi
 exec deva-tmux bridge start --transport socat --foreground

scripts/deva-tmux

@@ -83,9 +83,14 @@ host_tmux_bin() {
         die "tmux not found on host ($(host_target))"
 }
 
+# Remote invocations pass the tmux path (and args) as positionals to a
+# fixed `sh -c` script: the login shell only ever parses quoted words, and
+# sh — not zsh/fish — does the expansion. No exec before a || fallback:
+# a successful exec would make the fallback unreachable.
 host_tmux_socket() {
     local bin="$1"
-    hssh "$(host_target)" "sh -c '$bin display-message -p \"#{socket_path}\" 2>/dev/null || echo /tmp/tmux-\$(id -u)/default'"
+    hssh "$(host_target)" \
+        "sh -c '\"\$0\" display-message -p \"#{socket_path}\" 2>/dev/null || echo /tmp/tmux-\$(id -u)/default' $(printf '%q' "$bin")"
 }
 
 # --- socat transport ---------------------------------------------------------
@@ -189,7 +194,7 @@ cmd_ls() {
     if [[ "$transport" == "ssh" ]]; then
         local bin
         bin=$(host_tmux_bin)
-        hssh "$(host_target)" "$bin ls"
+        hssh "$(host_target)" "sh -c 'exec \"\$0\" ls' $(printf '%q' "$bin")"
     else
         ensure_bridge socat
         tmux -S "$BRIDGE_SOCK" ls
@@ -201,11 +206,14 @@ cmd_attach() {
     local transport
     transport=$(resolve_transport)
     if [[ "$transport" == "ssh" ]]; then
-        local bin cmd="attach"
+        local bin
         bin=$(host_tmux_bin)
-        [[ -n "${1:-}" ]] && cmd="new-session -A -s $(printf '%q' "$1")"
         mkdir -p "$STATE_DIR"
-        exec ssh -t "${SSH_OPTS[@]}" "$(host_target)" "$bin $cmd"
+        if [[ -n "${1:-}" ]]; then
+            exec ssh -t "${SSH_OPTS[@]}" "$(host_target)" \
+                "sh -c 'exec \"\$0\" new-session -A -s \"\$1\"' $(printf '%q ' "$bin" "$1")"
+        fi
+        exec ssh -t "${SSH_OPTS[@]}" "$(host_target)" "sh -c 'exec \"\$0\" attach' $(printf '%q' "$bin")"
     else
         ensure_bridge socat
         if [[ -n "${1:-}" ]]; then
@@ -222,7 +230,7 @@ cmd_tmux() {
     if [[ "$transport" == "ssh" ]]; then
         local bin
         bin=$(host_tmux_bin)
-        hssh "$(host_target)" "$bin $(printf '%q ' "$@")"
+        hssh "$(host_target)" "sh -c 'exec \"\$0\" \"\$@\"' $(printf '%q ' "$bin" "$@")"
     else
         ensure_bridge socat
         tmux -S "$BRIDGE_SOCK" "$@"